This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryFixed MCP initialization blocking when detecting Safari profile windows.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
`initialize` handshake no longer blocks on profile-window detection at startup. `initialize` handshake no longer blocks on profile-window detection at startup. Source: llm_adapter@2026-05-28 Confidence: low |
— |
Full changelog
Fixed
MCP initialize handshake no longer blocks on profile-window detection at startup.
When launched with SAFARI_PROFILE=<name>, the server used to run await refreshTargetWindow(true) on the module's top-level await before the stdio loop began responding to the MCP initialize request. That call shells out to AppleScript to enumerate Safari windows and match the profile — typically ~50–200ms, but it could exceed 30s if Safari was busy (Spotlight indexing, heavy tab churn, AppleScript daemon stalled).
When it did, Claude Code's 30-second MCP handshake timeout fired, the server was killed, and safari-* tools silently disappeared from the conversation's tool catalog until the user started a new Claude Code session.
The detection now runs in a fire-and-forget async IIFE so module init completes immediately; tool calls that arrive before it finishes already trigger lazy refresh inside getTargetWindowRef(), so the targeting behaviour is unchanged.
Install: npm install -g [email protected]
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About achiya-automation/safari-mcp
Native Safari browser automation for AI agents with 80+ tools. No Chrome dependency, optimized for Apple Silicon with 60% less CPU overhead.
Related context
Related tools
Earlier breaking changes
- v2.10.5 npm audit gate now fails build on high or critical advisories.
Beta — feedback welcome: [email protected]